and there was much rejoicing

[lockwoodx]

http://bravesblogger.files.wordpress.com/2008/06/c19-rejoicing.jpg

4chan Has Been DDOSed

"According to the 4chan status page (http://status.4chan.org/) all of the 4chan boards have been DDOSed and are down."

[Agnostic Pope]

Even I know how to start a DDoS attack. Just DON'T get caught, aka doing it in a remote public wifi place...oh and LULZ INTERNETS 4CHAN! :D

[Elrik Murder]

Even I know how to start a DDoS attack. Just DON'T get caught, aka doing it in a remote public wifi place...oh and LULZ INTERNETS 4CHAN! :D

Okay, I'll bite. How would you?

[Agnostic Pope]

You can use easy to use applications. Not sure I can, per se tell you how to do this in these forums. But a (http://www.pakbugs.com/programs-scripts/16524-dos-5-5-final-shutdown-site.html)link or two (http://insurgen.info/wiki/PyRAEP/UDP)won't hurt. UDPFlooder is the easiest one to use. All of these are really easy to use and in no time you can...um check how good/bad your server's protection is. DO NOT USE THESE IN MINECRAFT. :D

[Elrik Murder]

Ah, cool. I was going to state that a simple UDP application is all you need. To be honest, you could probably do it yourself if you're familiar with network programming.

[Anenome]

Lookup the Low Orbit Ion Cannon, that's a typical 4chan weapon for DDOS'ing, and you will probably be arrested if you use it.

This is some serious luls, I wonder who it could be? The LDS, the Scientologists, the Al Queda? US Gov?

Maybe there's an Antinonymous group now :P

[Agnostic Pope]

Maybe there's an Antinonymous group now :P
bBXyB7niEc0

[Primus]

There will be retribution. Probably ten fold.

[Agnostic Pope]

This guy (http://twitter.com/th3j35t3r) prob did it. He is not "antianon" he was just bored and he knows the true meaning of lulz. Read more (http://dailycaller.com/2010/12/28/patriotic-hackitivist-for-good-may-be-behind-takedown-of-4chan-org/)about it here. (he is no patriot that is just his excuse, LOL INTERNET. :D)
“4chan.org – that looks like a TANGO DOWN (not) maybe you guys pissed off the wrong person trying to (wrongly) ID me?” Oh and poppinlocking he is using a DOS attack not a DDoS. :P

[Anenome]

Ohhh, Jester, yeah, he's a cool cat. He only DDOSes for like a few hours max tho, meh.

Btw, "poppinglocking" is not a good diss of a name, if that's your intent >_> You didn't like "Pippy Woodlock? Come on now?

[lockwoodx]

Oh and poppinlocking he is using a DOS attack not a DDoS. :P

Tell that to these guys (http://it.slashdot.org/story/10/12/28/1322240/4chan-Has-Been-DDOSed) where the article came from. Wait never mind you don't rear articles.. or threads.. or posts... lol

Btw, "poppinglocking" is not a good diss of a name, if that's your intent >_> You didn't like "Pippy Woodlock? Come on now?

He can make up his mind while delivering pizzas lol ;)

[Anenome]

DOSing alone doesn't work anymore. If it's not a DDOS it's probably not gonna work. A DOS, IIRC, will actually be automatically ignored in no time by a modern server.

Jester probably has some bot-farm. He's a blackhat with supposedly noble intentions, of rooting out al queda, terrorists, et al. If you're gonna be a criminal anyway, probably a lot more fun to do terrible things to people who deserve it :P He's kind of like the Dexter of hackers :P

By attacking 4Chan he's taking them all on >_> that's a claim to fame right there. They won't take this lightly, especially his quip about jealousy or w/e.

4chan is apparently trying to ID Jester, that's what the comment above by AP refers to.

Apparently, Jester claims to have actual names of Anon members and has revealed some of their private convos?
Is Anon gonna to applaud me 4 exposing their private conversations the way they applaud Assange 4 exposin State Dept's? http://bit.ly/heEwPo
http://twitter.com/th3j35t3r/status/13402142580670464

Altho, L-Dub, this article (http://samsclass.info/thejester.htm) claims he doesn't use a DDOS, but rather some new proxy technique:
The Jester is a hacktivist who uses a secret "XerXes" DoS attack tool he made which uses incomplete requests, and is apparently similar to SlowLoris. Like SlowLoris, this attack can take down vulnerable servers from a single attack point and can avoid collateral damage to intermediate devices. This is not a DDoS. It's a single attacker, sent through Tor or some similar anonymizer...

It's been called a "Layer 7" attack. Whatever that means.

7 Application Layer
6 Presentation Layer
5 Session Layer
4 Transport Layer
3 Network Layer
2 Data Link Layer
* LLC sublayer
* MAC sublayer
1 Physical Layer
So, that would be the application layer, meaning what, that he's exploiting a particular application running on the servers themselves?

Also, Jester's blog: http://th3j35t3r.wordpress.com/tag/th3j35t3r/

Here's an article (http://th3j35t3r.wordpress.com/2010/12/08/time-to-speak-up-part-one/) on his blog where he's explaining the situation, as well as difference between DOS and DDOS. What a crazy world we live in. A blackhat, world-famous hacker is speaking openly?

This guy clearly has military training, as military jargon is all over his posts. I'm a go back and finish reading ;)

He says:
- There's some Jester imposter being an idiot. He told the guy he just painted a target on his head (muslims! lol).
- He's not a script kiddie as he is the only one who has his Xerxes attack tool.
So, if as has been suggested, I really am a ‘Skiddie’ – here is my question – where can you download XerXeS? I know you can’t download it anywhere because it exists in only 3 places, and all of those places are accessible to me only. Who’s the skiddie here?
- He does not use a botnet.
Contrary to popular belief, I do not have C&C of a botnet, by their very nature botnets require the injection in some form or other of malware onto unsuspecting user’s machines in order to gain enough ‘zombies’ to facilitate an attack. Any skiddie can create a botnet at the expense of the resources that don’t belong to them. (For example 4Chan/Anonymous).
XerXeS however, as has been shown numerous times, does not require a botnet, zombie PC’s or other people’s bandwidth in order to successfully pull down a site.
- Jester explains his 4Chan attack, and publishes 4Chan IRC supposedly-private chatlogs >_> here (http://th3j35t3r.wordpress.com/2010/12/10/time-to-speak-up-part-three/)!

Here's a video of the Xerxes attack tool in action >_> unheard of.

17268609

2nd video of a later version:

17290325

This is pretty fascinating, explaining his intention of attacking Wikileaks, which he wants to take down indefinitely >_>

Methodology and Tactics

As you may know I normally target Jihadist sites, but recently turned my attentions to Wikileaks.

So what was I thinking?

Initially, hitting Wikileaks servers hosted by OWNI (France), PRQ (Sweden), and BAHNHOF with ease, had the desired outcome of ‘coralling’ the Wikileaks operation onto a US hosted platform that could resist XerXeS – Amazon EC2.

The WL perceived victory was short-lived as enough pressure was now building both politically and technically (by that I mean service providers were aware that WL was now a prime target and couldn’t risk their own operations by providing services to WL).

As predicted, providers to WL started dropping them – first EveryDNS, then Amazon, then Paypal and Mastercard soon followed. The service providers acted as a force-multiplier, leaving the Wikileaks name nowhere to go except rely on volunteer mirrors.

So the head of the snake is almost cut off. The Wikileaks name is something few people, as far as service providers, will deal with. Their supply chain is being cut off.

So, great they have 2000 voluntary mirrors! By the very nature of volunteers providing ‘mirrors’ causes WL to be highly unstable as they will be up and down and sporadic on a day-by-day basis.

[Agnostic Pope]

Tell that to these guys (http://it.slashdot.org/story/10/12/28/1322240/4chan-Has-Been-DDOSed) where the article came from. Wait never mind you don't rear articles.. or threads.. or posts... lol


Besides your Engrish and HUEG ego I have nothing against you, hell you were even okay with me calling you poppinglocking when you were playing cooldude with your AWESOME steam buddies. ;) Although Pippy Woodlock sounds better now that I think of it. But I don't want to start anything that will derail the topic completely so meh. Yeah Anenome they are trying HARD to figure this guy's name (and to proceed to make a cute page over at ED, some penis jokes and a YOU FAIL AT LIFE rant :D) seems they don't really like the taste of their own medicine. Whatever does go down, it will be funny...or LULZ for all you fellow lurkers. All I know is that the guy is ex-military prob has great resources and was most likely involved in the Iraq War.

[Anenome]

My favorite part of the 4chan chatlogs Jester exposed was when they're basically like, "Hey, let's take down Jester's blog in revenge!"

Dude2: "Wait, aren't we pro-free speech, isn't that the point of supporting Wikileaks."

Dude1: "Oh yeah, dammit."

haha

I tend to agree with Jester on this issue. Assange has hurt the US in myriad ways. Not only has he caused massive damage to foreign relations, but countries stop sharing their secrets if they think you can't keep a secret. But worse, he left in all kinds of names that can or has gotten people killed! That's not right. It's irresponsible.

Jester also claims that some PDFs downloaded off the Wikileaks site have spy-ware embedded in them, ostensibly to burrow into the organizations they talk about >_>

Also, there have been long-standing allegations of TOR stream sniffing by Wikileaks. That and his account of Wikileaks making the site go offline periodically (before the attack) to try to curry donations, claiming they can't afford to keep the site up, though the donation link to the same IP continues to work fine during these times, lol.

It's one thing to leak bad behavior, I haven't seen any evidence of that. It's more like leaking someone's private diary, and that's just not cool. It's not like anything scandal's been discovered from the Wikileak. All it did was help terrorists.

[KingFire]

My favorite part of the 4chan chatlogs Jester exposed was when they're basically like, "Hey, let's take down Jester's blog in revenge!"

Dude2: "Wait, aren't we pro-free speech, isn't that the point of supporting Wikileaks."

Dude1: "Oh yeah, dammit."

haha

I tend to agree with Jester on this issue. Assange has hurt the US in myriad ways. Not only has he caused massive damage to foreign relations, but countries stop sharing their secrets if they think you can't keep a secret. But worse, he left in all kinds of names that can or has gotten people killed! That's not right. It's irresponsible.

Jester also claims that some PDFs downloaded off the Wikileaks site have spy-ware embedded in them, ostensibly to burrow into the organizations they talk about >_>

Also, there have been long-standing allegations of TOR stream sniffing by Wikileaks. That and his account of Wikileaks making the site go offline periodically (before the attack) to try to curry donations, claiming they can't afford to keep the site up, though the donation link to the same IP continues to work fine during these times, lol.

It's one thing to leak bad behavior, I haven't seen any evidence of that. It's more like leaking someone's private diary, and that's just not cool. It's not like anything scandal's been discovered from the Wikileak. All it did was help terrorists.

While I agree with most of your criticism about the website, I still believe they're doing a great job revealing the unknown.

Yeah privacy do matter, but when people lives are wasted for nothing, and when murders get away with their crimes just because they are called "soldiers", then we have to violate privacy in search for the lost truth.

At least they're not leaking personal lives like the lame TMZ's websites which are everywhere by now. They're leaking important information that uncover surprising lies that might actually effect our lives and beliefs.

[Anenome]

And how many murderous soldiers have been charged much less convicted because of Wikileaks? None that I know of.

The idea that murders are being covered up on a massive scale is simply false. Has there ever in history been a more compassionate military than our own? We, who invented smartbombs to limit civilian casualties.

Go look up what the British did when they faced terrorist guerilla tactics in South Africa, with fighters blending into the population? Know what they did, they gave the town an ultimatum to turn out the fighters, and then they killed the entire village, innocent or not. And it worked.

Any history of warfare, hell any history of the nation state will show that the modern era is the nicest in warfare there's ever been.

Have we been catching and convicting our own already? Hell yeah. Plenty of soldier murderers caught and charged already.

So, unless you can cite where Wikileaks actually achieved anything, I can't see how damaging international relations and giving the terrorists things like a list of manufacturers worldwide that we consider mission critical to the war effort--yeah, he released that, including names and addresses--then I don't see how you can justify that idea.

As far as I'm concerned, Assange is indistinguishable from a terrorist at this point. He couldn't have helped them more if he had tried.

And that helicopter "murder" of a journalist was an absolute hack job! The full tape reveals this "journalist" was walking around with Taliban troops as they prepared to fire on US soldiers, including setting up an RPG ambush.

The second you make friends with the enemy and integrate yourself into their unit, you're a legitimate target along with them, journalist and camera or not.

The simple fact is that Wikileaks was on the verge of bankruptcy, and he cut the helicopter tape, taking out all the incriminating stuff, to make it look like murder, to drum up predictable controversy and support from the anti-military folks, and know what, it worked. He's been laughing all the way to the bank ever since. And even faced civil war with his own admins over the purpose of the site.

So now he's a millionaire, I hear he just signed a million dollar book deal or w/e, and it's blood money, all of it. Yours and mine and our troops, and he's done exactly zero good--certainly nothing to outweigh all the damage he's done. Because he gave the terrorists name and addresses and exposed all of our allies who now face death, quite literally.

If Assange were an American, he'd go down in history as the greatest traitor right behind the Rosenbergs and Aldrich Ames.

[Anenome]

While I agree with most of your criticism about the website, I still believe they're doing a great job revealing the unknown.
There's responsible journalism and there's not. He's clearly in the "not" category, because he's not scrubbing these documents at all. He's going to get people killed all in the name of his own fame and wealth. That's villainous!


Yeah privacy do matter, but when people lives are wasted for nothing, and when murders get away with their crimes just because they are called "soldiers", then we have to violate privacy in search for the lost truth.
That's what a trial is for, not leaking every top secret cable, etc., that has absolutely nothing to do with crimes of any sort.


At least they're not leaking personal lives like the lame TMZ's websites which are everywhere by now. They're leaking important information that uncover surprising lies that might actually effect our lives and beliefs.
Celebrities live on fame. TMZ goes after celebrities--people who are paid to be famous. TMZ doesn't go into your or my home, nor celebrities for that matter. It's not invasion nor personal life invasion if all their footage, etc., is shot in public places.

Nor is TMZ getting people killed and releasing secrets never meant for public consumption.

[Agnostic Pope]

Wikileaks is terrorism. Who the fuck is he to uncover classified documents? He isn't even American, his freaking site is sponsored by our enemies. Jester is doing a great job messing with them and may there be others like him.